HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
ChurchShield
bd_1d24506109039028 · schema v1 · pii pii-v1
Full breach record for ChurchShield →ChurchShield, a provider of accounting, tax, and payroll services to churches, disclosed a data breach where unauthorized access to its network occurred between August 26 and September 14, 2023. The incident potentially exposed full names, Social Security numbers, bank account information, and dates of birth. ChurchShield engaged outside cybersecurity professionals for investigation and is offering complimentary Equifax Credit Watch Gold membership to affected individuals.
Vermont clock✗ VT AG >45 bday16 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_cb6b5cd1268d8eb7Indiana State AGfiled 2024-12-27Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-12-27-churchshield-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 27, 2024
- Raw hash
- 814b49ef836ed8a22585a90b2a3d8e81bcd3d7863c26e298f20e885ed708fa06
Reporting entity
- Name
- ChurchShieldnorm: churchshield
Victim entity
- Name
- ChurchShieldnorm: churchshield
Incident
- Discovered
- Aug 26, 2023
- Materiality determined
- Dec 27, 2024
- Notification sent
- Dec 27, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with the Office of the Vermont Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 16 months(489 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.